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PACE: Press Release: InterLok for Macintosh v2.0 Announcement 
iLok-enabled software products will ship with an iLok hardware device, or "key", 
containing the authorization license necessary to activate and run the ... 

www.paceap.com/pr1 3i.html -11k- Cached - Similar pages 

PACE Anti-Piracy Releases InterLok 4.1 for Windows 
Additional authorization method: Support for authorization via digitally 
signed ... software rental, remote feature/module control, iLok USB smart 
key ... 

www.paceap.com/pr16i.html - 8k - Cached - Similar pages 
[More results from _wvyw.paceap.com ] 

Digidesi g n | Su p port | iLok Authorization and iLok.com Information 

The iLok USB Hardware Key (pictured here) is a device that holds ... plug-ins and 

optional software products sold as "Full License" or time-limited "Rental" ... 

www.digidesign.com/support/iiok/ - 36k - Cached - Similar pages 

An yCard! The Credit Card Aut horization Softwar e Program for Small ... 
Software. is a Windows-based credit card authorization program which is 
particularly well .... you don't have to pay a monthly fee to rent the card reader! ... 
www.ronwatters.com/RonSoft2.htm - 48k - Cached - Simitar pages 

Sftftwat e License A g reement 

... (ii) for which Customer has received a product authorization key ("PAK"). ... 
ASSEMBLE ALL OR ANY PORTION OF THE SOFTWARE; OR RENT, LEASE, 
DISTRIBUTE, ... 

www.cisco.com/public/sw-ticense-agreement.html - 10k - Cached - Similar pa g es 

Secure software rental system using distributed software - US ... 
Method for generating a password using public key cryptography ... A method of 
providing secure software rental, comprising the steps of: ... 
www.patentstorm.us/patents/5548645-claims.html - 20k - Cached - Similar pag es 

Remote access authorization of local content - US Patent 7089425 
Secure software rental system using continuous asynchronous password 
verification ... Key-based protection method for light-readable discs ... 
www.patentstorm.us/patents/7089425.html - 21k - Cached - Similar pa ges 

[PDF] eGenix.com Commercial License Agreement 1.1.0 
File Format: PDF/Adobe Acrobat 

3) rent, sublicense or lease the Software. 4. Authorizations. The extent of 
authorization depends on the ownership of a Proof of Authorization for the ... 

www.egenix.com/products/python/mxODBC/eGenixxom-Commercial-License- 
1 .2.0. pdf - Simi lar pages 

The ALTOVA Online Shop 

Tamino® XML Server can only be installed and used with a license key. The license 
key file will be delivered to you after appropriate authorization ... 

https://shop.altova.com/products/tamino_tou.asp - 17k - Cached - Similar pages 

mx Extension Series - License Information 

We will also send you the Proof of Authorization Key by e-mail to ... (ii) rent, sell, 
lease or otherwise transfer the Software or any part thereof or use ... 
simpleparse.sourceforge.net/mxLicense.html - 26k - Cached - Similar pages 



Sponsored Links 

Safe Software Activation 
Reduce Costs with On Demand Pricing 
Request a Free Microsoft Trial! 
www.SecureLM.net 

RMI Rental Software 
Software for the Equipment 
Rental, Sales and Service Industry 
www.rmiusa.com 

Software Activation 
Software Vendors: Centrally Track 
Customer Licensing With FLEXnet. 
www.macrovision.com 

Rental Inventory Software 
Complete rental inventory 
management software solution. 
www.atertms.com/ 

Windows Rental Software 
Hi speed data entry for many rental 
industries. Single/multi-locations 
www.arm-software.com 

Sirius Rental Software 
Inventory & Rental software. 
Manage equipment, party & AV rental 

www.orion-soft.com 

Rental Software 

The Online Directory Of 
Rental Software. 
SoftwarelnfoGuide.com 

Rental Property Software 
Simplest to Learn and Use 
Try it for Free Now! 
www.LandlordMax.com 
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S oftware MS9ge authorization system with key for decry pting /re f „ 
A computer based function control system is particularly suited for use as a software 
security device on the highly popular personal computers or a ... 
www.freepatentsonline.com/4864494.html - 96k - Cached - Similar_pag_es 

HP.com - Product Autho rization Ke y (PAK) data for OpenVMS and ... 
Product Authorization Key (PAK) data for OpenVMS and Tru64 UNIX license 
PAKs ... name to implement the licensing of different functionality or usage rights. ... 
licensing. hp.com/swl/view.slm?page=pak - 28k - Cached - Similar pages 

HP.com - glossary 

... Authorization Key which unlocks usage of the given software product. ... to 
keep software license records and to monitor and control software usage. ... 

licensing. hp.com/swl/glossary.slm - 73k - Cached - Similar pages 
[ More results from licensing.hp_.com ] 

CIPO- Patent -2529064 

Described is a method and system for controlling usage of software on a computing 
device. An authorization key is generated as a function of a device string ... 
patentsl .ic.gc.ca/details?patent_number=2529064 - 15k - Cached - Similar pages 

Software authorization system and method - US Patent 6460023 
Software authorization system and method - US Patent 6460023 from Patent 
Storm. ... Method and system of using personal information as a key when ... 
www.patentstorm.us/patents/6460023.html - 20k - Cached - Similar pages 

Digidesign [ Support | iLok Authorization and iLok.com Information 
Pop-up Authorization Messages - Trial Licenses - Removing Optional Plug-Ins & 
Software; iLok Usage Guide (installed in your Documentation folder when you ... 
www.digidesign.com/support/ilok/ - 36k - Cached - Similar pages 

Title Index 

... Access Protocol (XCAP) Usage for Manipulating Presence Document Contents .... 
Authorization, and Accounting (AAA) Registration Keys for Mobile IPv4 ... 
dret.net/rfc-index/titles - 977k - Jun 3, 2007 - Cached - Similar pages 

[Paper) A Software Protection Solution for Application Service ... 

Currently, JavaCard technology is adopted for SPK as the authorization and .... 

Software Protection Key (SPK) To protect authorized usage of the target ... 

www.actapress.com/PDFViewer.aspx?paperld=24436 - Similar pages 

Public key infrastructure - Wikipedia. the free encyclopedia 

3.1 Web Of Trust; 3.2 Simple Public Key Infrastructure. 4 History; 5 PKI software; 6 

Usage examples; 7 See also; 8 References; 9 External links ... 

en.wikipedia.org/wiki/Public_keyJnfrastructure - 45k - Jun 4, 2007 - 

Cached - Similar pages 

mx Extension Series - License Information 

Usage of the software in commercial settings such as for implementing in-house .... 
We will also send you the Proof of Authorization Key by e-mail to ... 
simpleparse.sourceforge.net/mxLicense.html - 26k - Cached - Sjmjja.r_pag.es 



Sponsored Links 

Software Activation Tool 
On Demand License Activation. 
Get the latest Microsoft Whitepaper 
www.Secure-LM.net 

Software Activation 
Software Vendors: Centrally Track 
Customer Licensing With FLEXnet. 
www.macrovision.com 

Track Software Usage 
Know what software is being used, 
how often, andby whom. Free trial. 
www.expressmetrix.com 

Track Software Usage 

Audit, Meter and Control Software 

Use across your organization 

www.softwaremetering.com 
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Public protection of software 
Amir Herzberg, Shlomit S. Pinter 

October 1987 ACM Transactions on Computer Systems (TOCS), volume 5 issue 4 
Publisher: ACM Press 

Full text available: ^jpdffl.78 MB) Additional Information: full citation , abstract , references , citings , index terms , review 

One of the overwhelming problems that software producers must contend with is the 
unauthorized use and distribution of their products. Copyright laws concerning software 
are rarely enforced, thereby causing major losses to the software companies. Technical 
means of protecting software from illegal duplication are required, but the available means 
are imperfect. We present protocols that enable software protection, without causing 
substantial overhead in distribution and maintenance. The pro ... 



2 Identification control: Public key distribution through "cryptolDs" 
Trevor Perrin 

August 2003 Proceedings of the 2003 workshop on New security paradigms NSPW '03 

Publisher: ACM Press 

Full text available: ^.pjjfOALMB) Additional Information: fuJLcitatioji, abstract, reteceacfis, citings, indejaejjns 

In this paper, we argue that person-to-person key distribution is best accomplished with a 
key-centric approach, instead of PKI: users should distribute public key fingerprints in the 
same way they distribute phone numbers, postal addresses, and the like. To make this 
work, fingerprints need to be small, so users can handle them easily; multipurpose, so 
only a single fingerprint is needed for each user; and long-lived, so fingerprints don't have 
to be frequently redistribute ... 

Keywords: cryptolDs, fingerprints, key distribution, key management, public key 
infrastructure 



Dig ital si g nets: self-enforcin g protection of digital information ( preli minary version ) 
Cynthia Dwork, Jeffrey Lotspiech, Moni Naor 

July 1996 Proceedings of the twenty-eighth annual ACM symposium on Theory of 
computing STOC '96 

Publisher: ACM Press 

Full text available: ^]|jrflC.t,24-MB) Additional Information: full cit ation , references. citings.. iadexJerms 



A wide-area Distribution Network for free software 

Arno Bakker, Maarten Van Steen, Andrew S. Tanenbaum 

August 2006 ACM Transactions on Internet Technology (TOIT), Volume 6 Issue 3 
Publisher: ACM Press 

Full text available: .estfuHSiQB KB) Additional Information: f ull citation , abstract, refere nces, index terms 

The Globe Distribution Network (GDN) is an application for the efficient, worldwide 
distribution of freely redistributable software packages. Distribution is made efficient by 
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encapsulating the software into special distributed objects which efficiently replicate 
themselves near to the downloading clients. The Globe Distribution Network takes a novel, 
optimistic approach to stop the illegal distribution of copyrighted and illicit material via the 
network. Instead of having moderators check the p ... 

Keywords: Distributed objects, copyright, file sharing, middleware, software distribution, 
traceable content, wide-area networks 



5 Systems: Authorization for digital rights management in the qeospatial domain 
Andreas Matheus 

November 2005 Proceedings of the 5th ACM workshop on Digital rights management 
DRM '05 

Publisher: ACM Press 

Full text available: ^[.pdj{jgZ 9.98 KB) Additional information: fylLfilation, absJcaci, reJsmnee.a, index t erms 

Since information is available in digital format, the protection of intellectual property and 
copyright fraud has become an important issue. This is, because the digital content can be 
copied without quality loss and with a reasonable effort of time, equipment and money. 
After copying, it can be distributed using the Internet, again with little effort of time and 
money. In such an environment, the loss of revenue for the music and film industry — not 
only due to sites like Napster ~ is becomin ... 

Keywords: DRM, access control, geoXACML, geospatial 



6 Ap plications and compliance: Virtual monotonic counters and count-limited objects 
£v using a TPM without a trusted OS 

Luis F. G. Sarmenta, Marten van Dijk, Charles W. O'Donnell, Jonathan Rhodes, Srinivas 
Devadas 

November 2006 Proceedings of the first ACM workshop on Scalable trusted computing 
STC '06 

Publisher: ACM Press 

Full text available: ^ r&(44L59lKBJ Additional Information: fyJLoi&Uon, sbMceja, references, iDdexierjms. 

A trusted monotonic counter is a valuable primitive that enables a wide variety of highly 
scalable offline and decentralized applications that would otherwise be prone to replay 
attacks, including offline payment, e-wallets, virtual trusted storage, and digital rights 
management (DRM). In this paper, we show how one can implement a very large number 
of virtual monotonic counters on an untrusted machine with a Trusted Platform Module 
(TPM) or similar device, without relying on a trusted OS ... 

Keywords: certified execution, e-wallet memory integrity checking, key delegation, 
stored-value, trusted storage 



Hardware/software IP protection 

Marcello Dalpasso, Alessandro Bogliolo, Luca Benini 

June 2000 Proceedings of the 37th conference on Design automation DAC '00 

Publisher: ACM Press 

Full text available: ^^pdf(5J.J3LK0„) Additional Information: fu(Lcltaiion, absjraci, citings, index Jerros 

Design methodologies based on reuse of intellectual property (IP) components critically 
depend oh techniques to protect IP ownership. IP protection is particularly challenging for 
hardware/ software systems, where an IP core runs embedded software: both the software 
and the core are valuable IP that must be protected. We propose a new technique for 
protecting the IP of both processor cores and application software in hardware/software 
systems. Our approach is based on public-key c ... 

S ystems: Securin g sensitive content in a view-only file syst em 
Kevin Borders, Xin Zhao, Atul Prakash 

October 2006 Proceedings of the ACM workshop on Digital rights management DRM '06 

Publisher: ACM Press 

Full text available: ^"H|pdf (3 57.44 KB ) Additional Information: full citatio n, abstract, reference s, index terms 

One of the most fundamental problems in computer security is protecting sensitive digital 
information from unauthorized disclosure. There are a number of challenges, such as 
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spyware, removable media, and mobile devices, which make this a very hard problem. 
The problem becomes even more difficult when the adversary is somebody who is 
authorized to view the data. This is what is commonly referred to as an insider information 
teak. Insider leaks often occur out of malice, but sometimes are just due ... 

Keywords: digital rights management, file systems, information leakage, insider abuse, 
virtual machines 



Software En g ineering for Secure Systems (SESS ) — Buildin g Trustworth y 
Applications: Establishing trustworthiness in services of the critical infrastructure 
through certification and accreditation 
Seok Won Lee, Robin A. Gandhi, Gail-Joon Ahn 

May 2005 ACM SIGSOFT Software Engineering Notes , Proceedings of the 2005 
workshop on Software engineering for secure systems— building 
trustworthy applications SESS '05, Volume 30 Issue 4 

Publisher: ACM Press 

Full text available: ^■p pdfl&JEL2&KB) Additional Information: fgJLcitatiori, abs.tca.ct. rsfmsasss, citings, indexJerms 

Trustworthiness in services provided by the Critical Infrastructure (CI) is essentially 
dependent on the quality of underlying software, systems, practice and environment, as 
which the software information infrastructures are becoming increasingly a major 
component of business, industry, government and defense. The level of trustworthiness 
required from services that are operational in such critical software information 
infrastructures is often established based on standardized infrastructure-wi ... 

Keywords: Security and Standardization, critical infrastructure protection, information 
security requirements engineering, information systems certification and accreditation, 
ontological engineering, risk assessment 



10 How to break fraud-detectable key recovery | 

Birgit Pfitzmann, Michael Waidner 

January 1998 ACM SIGOPS Operating Systems Review, volume 32 Issue l 
Publisher: ACM Press 

Full text available: ^^pdf(4J2Jj*9J£E0 Additional Information: fialLfiitalian. @k&U3fit. inflMLtStroa 

Fraud detection for software key recovery schemes means that, without knowing the 
session key, a third party can verify whether the correct session key could be recovered. 
This concept and a construction by so-called binding data was introduced by Verheul et al. 
at Eurocrypt '97 to provide for dishonest users that make simple modifications to 
messages, e.g., delete the key recovery information, and manipulate the recipient's 
software such that it decrypts messages even if the key recovery inform ... 

11 Leg al, ethical, and societal issues in e-commerce: Supportin g the legal identities of | 
contracting ag ents with an agent authorization platform 
Dickson K. W. Chiu, Changjie Wang, Ho-fung Leung, Irene Kafeza, Eleanna Kafeza 
August 2005 Proceedings of the 7th international conference on Electronic commerce 

ICEC '05 
Publisher: ACM Press 

Full text available: pjJKA&LQ.QJSB) ■ Additional Information: fwlLcitation. abstract, tsSsssatsss., indexJerms 

New technologies have introduced new ways in business transactions where online 
contracting. is complementing and even substituting traditional paper-based transactions. 
One of the major recent innovations of online contracting is the use of intelligent agents to 
make contracts among users and businesses around the globe. Despite recent legislations 
on electronic contracting, there are no legislations governing automatic agent transactions 
except one preliminary attempt in the USA. We identify th ... 

Keywords: PKI, agent certificate, authorization, e-contract, intelligent agents, legal 
identity 



12 



Software en g ineerin g for security: a roadma p 
PremkumarT. Devanbu, Stuart Stubblebine 

May 2000 Proceedings of the Conference on The Future of Software Engineering ICSE 
•00 
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Publisher: ACM Press 

Full text available: MB) Additional Information: full citatio n. ce.feXfi.Qces, citings, index ter ms 



Keywords: copy protection, security, software engineering, water-marking 



13 Certificate-based authorization policy in a PKl environment | 
Mary R. Thompson, Abdelitah Essiari, Srilekha Mudumbai 

November 2003 ACM Transactions on Information and System Security (TISSEC), Volume 

6 Issue 4 
Publisher: ACM Press 

Full text available: ^^|pdft233.63 KB) Additional Information: full citation , abstract , references , citings , index terms 

The major emphasis of public key infrastructure has been to provide a cryptographically 
secure means of authenticating identities. However, procedures for authorizing the 
holders of these identities to perform specific actions still need additional research and 
development. While there are a number of proposed standards for authorization structures 
and protocols such as KeyNote, SPKI, and SAML based on X.509 or other key-based 
identities, none have been widely adopted. As part of an effort to us ... 

Keywords: Public key infrastructure, XML, digital certificates 



14 Dig ital multimedia book: From dig ital audi obook to secure di g ital multimedia-book 

Lavinia Egidi, Marco Furini 

July 2006 Computers in Entertainment (CIE), Volume 4 issue 3 
Publisher: ACM Press 

Full text available: ^^.pxlf(3MJS_KB.} Additional Information: fyJUitatian, a.b.3tra.c.t. ce.ferenc£ts, iodexjemas 

Portable devices and wireless connections are creating a new scenario in which digital 
information is entering our lives in a massive way. In this article we consider MP3 
audiobook applications and propose an approach to completely restyle the applications to 
the current mobile and multimedia scenario. Our mechanism introduces multimedia 
contents (images and text) into the audiobook application and synchronizes them with the 
MP3 audio stream. Multimedia contents are protected by a security syste ... 

Keywords: multimedia applications, multimedia communications, multimedia over 
wireless, music distribution 



Technolo g ies for repository interoperation and access control 

Shirley Browne, Jack Dongarra, Jeff Horner, Paul McMahan, Scott Wells 

May 1998 Proceedings of the third ACM conference on Digital libraries DL '98 

Publisher: ACM Press 

Full text available: fij Vdfn.14 MB) Additional Information: full citation , references , citings , index terms 



16 Flexible control of downloaded executable content 
j4fi^ Trent Jaeger, Atul Prakash, Jochen Liedtke, Nayeem Islam 

May 1999 ACM Transactions on Information and System Security (TISSEC), Volume 2 
Issue 2 

Publisher: ACM Press 

Full text available: ^■frjodft297.79 KB) Additional Information: full citation , abstract , references , citings , index terms , review 

We present a security architecture that enables system and application a ccess control 
requirements to be enforced on applications composed from downloaded executable 
content. Downloaded executable content consists of messages downloaded from remote 
hosts that contain executables that run, upon receipt, on the downloading principal's 
machine. Unless restricted, this content can perform malicious actions, including accessing 
its downloading principal's private data and sending messages on th ... 

Keywords: access control models, authentication, autorization machanisms, collaborative 
systems, role-based access control 
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An authorization model for a public key mana g ement service 
Pierangela Samarati, Michael K. Reiter, Sushil Jajodia 

November 2001 ACM Transactions on Information and System Security (TISSEC), Volume 

4 Issue 4 
Publisher: ACM Press 

Full text available: ^Qpdf(337,73 KB) Additional Information: full cit ation, abstract , references , citings . indexJerm$. review 

Public key management has received considerable attention from both the research and 
commercial communities as a useful primitive for secure electronic commerce and secure 
communication. While the mechanics of certifying and revoking public keys and escrowing 
and recovering private keys have been widely explored, less attention has been paid to 
access control frameworks for regulating access to stored keys by different parties. In this 
article we propose such a framework for a key management ser ... 

Keywords: Access control, authorizations specification and enforcement, public key 
infrastructure 



Verifyin g security protocols with Brutus 
E. M. Clarke, S. Jha, W. Marrero 

October 2000 ACM Transactions on Software Engineering and Methodology (TOSEM), 

Volume 9 Issue 4 
Publisher: ACM Press 

Full text available: ^j«Jf(34ZJ.2.KB) Additional Information: fuJUUcUaUon. Sbslract, releienc&s, citings, iodexjerms 

Due to the rapid growth of the "Internet" and the "World Wide Web" security has become 
a very important concern in the design and implementation of software systems. Since 
security has become an important issue, the number of protocols in this domain has 
become very large. These protocols are very diverse in nature. If a software architect 
wants to deploy some of these protocols in a system, they have to be sure that the 
protocol has the right properties as dictated ... 

Keywords: authentication and secure payment protocols, formal methods, model- 
checking 




19 Take control of TCPA 

David Safford, Jeff Kravitz, Leendert van Doom 
August 2003 Linux Journal, Volume 2003 Issue 112 
Publisher: Specialized Systems Consultants, Inc. 

Full text available: html(2173 KB) Additional Information: full citation , abstract 

The free code behind IBM's new security chip. Menace or protector? 

20 Code optimization II: Hiding program slices for software security 

Xiangyu Zhang, Rajiv Gupta 

March 2003 Proceedings of the international symposium on Code generation and 
optimization: feedback-directed and. runtime optimization CGO '03 

Publisher: IEEE Computer Society 

Full text available: ^"jj^j.Qdf(1.05 MB) Additional Information: full citation, abstract, references, citings, index terms 

Given the high cost of producing software, development of technology for prevention of 
software piracy is important for the software industry. In this paper we present a novel 
approach for preventing the creation of unauthorized copies of software. Our approach 
splits software modules into open and hidden components. The open components are 
installed (executed) on an unsecure machine while the hidden components are installed 
(executed) on a secure machine. We assume that while open ... 
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1 The optimal software licensing polic y under quality uncertainty 
Jie Zhang, Abraham Seidmann 



&r September 2003 Proceedings of the 5th international conference on Electronic commerce 
ICEC '03 



Publisher: ACM Press 

Full text available: ^gjpdf(237.20 KB) 



Additional Information: full citation , abstract , references 



A new service model has emerged which delivers application software and services over 
the Web on a lease or subscription basis. Our paper studies the optimal licensing policy of 
a software vendor that uses that business model. We look at software vendors that are 
both selling (at a posted price) or leasing their products where as lessor they guarantee 
that the lessee will always have the latest version of the software on their desktop. We 
address some of the specific issues of implementing this ... 

Keywords: network externality, price discrimination, risk, software licensing, upgrade 
compatibility 



2 Harnessing user needs and insights: Customer driven innovation: Quicken® Rental | 
Pro perty Mana g er 
Suzanne Pellican, Matt Homier 

November 2005 Proceedings of the 2005 conference on Designing for User experience 
DUX '05 

Publisher: AIGA: American Institute of Graphic Arts 

Full text available: ^■Pjp.dfl S 10,37 KB ) Additional Information: feJLcjtatioa, afeMriicj 

In an effort to find and solve new unmet customer needs, the Quicken® Personal Finance 
Group (QPFG) embarked on a mission to create innovative new products that would truly 
make a difference in people's lives. Quicken® Rental Property Manager is the first of these 
products and the first "version 1.0" outside of Quicken® Personal Finance Software to be 
released from the Quicken® group in a decade. This paper will focus on how the team 
blazed a new trail within an org ... 

Keywords: advanced prototypes, analysis, architecture, business case, business strategy, 
concept design, concept evaluation, concept generation, concepts, conceptual model, 
customer interviews, customer-driven innovation, customer-focus, design planning, 
desktop software, detailed design, experience strategy, focus groups, generative research, 
interaction design, interdisciplinary design, launch and learn, macromedia flash, 
marketing / market research, office, organizational culture, organizational planning, 
participatory design, performance metrics, personal finance, pilot testing, polish, process, 
process improvement, product design, product management, prototyping, simple, tax, 
trade-offs, usability research, user experience, user feedback, user interface design, user 
research, user studies, user types, user-centered design / human-centered design, version 
1.0, visual design 
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A H.-A. Jacobsen, O. Gunther 

November 1999 Proceedings of the 1st ACM conference on Electronic commerce EC '99 

Publisher: ACM Press 

Full text available: ^^.adft22Q*l(LKBl Additional Information: fcjJLCita^on. reiej^ncjes, citings, index terms 



D ynamic partial-order reduction for model checkin g software 
Cormac Flanagan, Patrice Godefroid 

January 2005 ACM SIGPLAN Notices , Proceedings of the 32nd ACM SIGPLAN-SIGACT 
symposium on Principles of programming languages POPL '05, Volume 40 
Issue l 

Publisher: ACM Press 

Full text available: ^jjjQodff278.16 KB) Additional Information: full citation , abstract , references , index terms 

We present a new approach to partial-order reduction for model checking software. This 
approach is based on initially exploring an arbitrary interleaving of the various concurrent 
processes/threads, and dynamically tracking interactions between these to identify 
backtracking points where alternative paths in the state space need to be explored. We 
present examples of multi-threaded programs where our new dynamic partial-order 
reduction technique significantly reduces the search space, eve ... 

Keywords: partial-order reduction, software model checking 



Ex periments in automated analysis of concurrent software systems | 

G. Avrunin, J. Wileden, L. Dillon 

November 1989 ACM SIGSOFT Software Engineering Notes , Proceedings of the ACM 
SIGSOFT '89 third symposium on Software testing, analysis, and 
verification TAV3, Volume 14 Issue 8 

Publisher: ACM Press 

Full text available: ^jitf(fiaa2ZJ£Bi Additional Information: tuJLatsiLQn. ab.sJcfi.ct, Lelej&iicss, citings. iad.exjg.cms 

It is unlikely that any single approach to analysis of concurrent software systems will meet 
all the needs of software developers throughout the development process. Thus, 
experimental evaluation of different analysis techniques is needed to determine their 
relative strengths and practical limitations. Such evaluation requires automated tools 
implementing the analysis techniques. This paper describes a prototype toolset 
automating the constrained expression approach to the analys ... 

Software engineerinq-as it is 
Barry W. Boehm 

September 1979 Proceedings of the 4th international conference on Software 
engineering ICSE '79 

Publisher: IEEE Press 

Full text available: ^gp.df(.LQJ_MB). Additional Information: fulLcitation, abstract, reference^, citings, index.temis 

This paper presents a view of software engineering as it is in 1979. It discusses current 
software engineering practice with respect to lessons learned in the past few years, and 
concludes that the lessons are currently not heeded roughly half of the time. The paper 
discusses some of the factors which may account for this lag, including rapid technological 
change, education shortfalls, technology transfer inhibitions, resistance to disciplined 
methods, inappropriate role models, and a restr ... 

Entity-life modelin g and structured analysis in real-time software desi g n — a 

comparison 

Bo Sanden 

December 1989 Communications of the ACM, Volume 32 Issue 12 
Publisher: ACM Press 

Full text available: ^.pdf&9iL9JlK8j Additional Information: fullxitatipn, abstract. reMeupej,, citings, indexjerms, review 

While structure analysis is sometimes used as a first step towards a real-time software 
design with concurrent tasks, a more appropriate task structure can often be based 
directly on concurrent patterns in the problem environment. 

Keywords: Ada tasks, dataflow, entity-life modeling, process, rendezvous, structured 
analysis, structured design, transform 
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Scaling up: a research agenda for software engineering | 
CORPORATE Computer Science and Technology Board 
March 1990 Communications of the ACM, Volume 33 Issue 3 
Publisher: ACM Press 

Full text available: ^^p_df(Jj5.1_MB) Additional Information: fulLcttation, abstract, refeiences, citings, tDdextexms, te.vte.vv. 

The following excerpts have been gleaned from a report by the Computer Science and 
Technology Board that summarizes the deliberations of a group of software engineers 
participating in a CSTB workshop that focused on setting research priorities. 

Software theft and the problem of intellectual property rig hts | 
Tom Forester 

March 1990 ACM SIGCAS Computers and Society, Volume 20 Issue 1 
Publisher: ACM Press 

Full text available: pdf(.L25_M^.} Additional Information: MLPitMpn, aMrJSt, citings. in.dSiUe.fms, 

Computers have brought many benefits to society, but they have also created new social 
problems such as computer crime, software theft, computer unreliability, invasions of 
privacy, hacking and the creation of viruses. In turn, these problems pose ethical 
dilemmas for the youthful profession of computing, which has yet to develop rigid codes of 
ethics. This is especially the case with software theft or piracy, a widespread phenomenon 
and a modern version of the age-old problem of intellectual pr ... 

Contemporary software development environments | 
William E. Howden 

May 1982 Communications of the ACM, Volume 25 Issue 5 
Publisher: ACM Press 

Full text available: ^■||jpdf(1.22 MB) Additional Information: full citation , aksjraci, references , citings , index terms 

There are a wide variety of software development tools and methods currently available or 
which could be built using current research and technology. These tools and methods can 
be organized into four software development environments, ranging in complexity from a 
simple environment containing few automated tools or expensive methods to a complete 
one including many automated tools and built around a software engineering database. 
The environments were designed by considering the life-cycle ... 

Software engineering I: A series of choices variability in the development process 
John M. Hunt, John D. McGregor 

March 2006 Proceedings of the 44th annual Southeast regional conference ACM-SE 44 

Publisher: ACM Press 

Full text available: ^^j2df(12L2QJSfil Additional Information: fwlLCLtatipn., abstract r^Iejjnce§, ia0i?>;JSims 

Software variability is "the ability of a software artifact to vary its behavior at some point 
in its life cycle" [12]. Almost every software artifact requires some type of variability. 
While variability is endemic to the creation of software it is rarely the direct focus of study. 
In addition, software systems have shown an increasing amount of variability in recent 
years. This work provides an analysis of the decisions involved in providing variability at a 
specific point in a product. A class ... 
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An entity-life modelin g ap proach to the design of concurrent software 
Bo Sanden 

March 1989 Communications of the ACM, Volume 32 Issue 3 
Publisher: ACM Press 
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Using the idea of Entity-Life Modeling for task decomposition, the design of a prototypical 
elevator control system is explored and compared to an earlier JSD solution. 

Software protection and simulation on oblivious RAMs 
Oded Goldreich, Rafail Ostrovsky 

May 1996 Journal of the ACM (JACM), Volume 43 Issue 3 
Publisher: ACM Press 

Full text available: ^jpjjf( 3.44 MB ) Additional Information: full citation, abstract , references, citings. iQd^xJLejTQs. 

Software protection is one of the most important issues concerning computer practice. 
There exist many heuristics and ad-hoc methods for protection, but the problem as a 
whole has not received the theoretical treatment it deserves. In this paper, we provide 
theoretical treatment of software protection. We reduce the problem of software 
protection to the problem of efficient simulation on oblivious RAM. A machine is oblivious if 
thhe sequence in wh ... 

Keywords: pseudorandom functions, simulation of random access machines, software 
protection 
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re quirements: a basis for dynamic systems management 
Michael Dinkel, Uwe Baumgarten 

May 2005 ACM SIGSOFT Software Engineering Notes , Proceedings of the second 

international workshop on Software engineering for automotive systems 
SEAS '05, Volume 30 Issue 4 
Publisher: ACM Press 

Full text available: pdfQJL9J>AKS) Additional Information: fyJLcjtatipn, a„b_stras.t, teleience^, inde.xJerms 

The management of dynamic systems is an upcoming challenge for software engineers in 
automotive and other embedded systems. The complexity of current automotive 
computing systems is already difficult to handle for car makers and the expected growth 
in the area of electronic devices in vehicles will even intensify this situation. This paper 
presents a model based approach for enabling automatic configuration of distributed 
component oriented systems. Nonfunctional requirements and capabilities of ... 

Keywords: NFR, application model, capability, component, configuration, nonfunctional 
requirement, platform model, software management, system .management 
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Software piracy is a major concern for software providers, despite the many defense 
mechanisms that have been proposed to prevent it. This paper identifies the fundamental 
weaknesses of existing approaches, resulting from the static nature of defense and the 
impossibility to prevent the duplication of digital data. A new scheme is presented that 
enables a more dynamic nature of defense and makes it harder to create an additional, 
equally useful copy. Furthermore it enables a fine-grained cont ... 

Keywords: authentication, copyright protection, diversity, identification, intellectual 
property protection, software piracy prevention, tailored updates 
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Software management | 
Cindy Dooling, Jeff White, Cathy Lee 

November 2006 Proceedings of the 34th annual ACM SIGUCCS conference on User 
services SIGUCCS '06 

Publisher: ACM Press 

Full text available: ^gj pdf<66.43 KB) Additional Information: full citation , abstract , references , index terms 

Software management problems? In this session presenters will discuss and demonstrate 
how Pima Community College (PCC) reigned in control of the software on 5,550 desktop 
and portable computers located over six campuses, two district offices, and nine center 
locations.To combat the lack of software standards and perceived legality issues, PCC 
developed a software plan with input from faculty, staff, and administrators. Prior to 
implementation of this plan, all users could purchase, download, or ... 

Keywords: administrative support, audit, communication, computers, licenses, principles, 
software management, training 



Teaching secure communication protocols using a game representation 
Leonard G. C. Harney 

January 2003 Proceedings of the fifth Australasian conference on Computing education - 
Volume 20 ACE '03 

Publisher: Australian Computer Society, Inc. 

Full text available: ^Bj|jpdf(252.19 KB) Additional Information: full citation , abstract , references , index terms 

The Security Protocol Game is a highly visual and interactive game for teaching secure 
data communication protocols. Students use the game to simulate protocols and explore 
possible attacks against them. The power of the game lies in the representation of secret 
and public key cryptography. Specifically, the game provides representations for plain text 
and encrypted messages, message digests, digital signatures and cryptographic keys. 
Using these representations, students can construct public ke ... 

Keywords: PGP, blind signature, computer network, cryptography, digital signature, key 
exchange, man-in-the-middle attack, protocols, replay attack, secure communication 



3 Experience reports: process and tools: Effective experience repositories for software | 
engineering 

Kurt Schneider, Jan-Peter von Hunnius 

May 2003 Proceedings of the 25th International Conference on Software Engineering 
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Software development and acquisition require knowledge and experience in many areas of 
software engineering. Experience helps people to make decisions under uncertainty, and 
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to find better compromises. Experience-based process improvement considers experience 
as a prerequisite for competent behavior in software development. There is usually a 
repository to store experiences and to make it available for reuse. At DaimlerChrysler, we 
have been building those repositories for more than five years. ... 

Global software piracy: you can't get blood out of a turnip 
Ram D. Gopal, G. Lawrence Sanders 

September 2000 Communications of the ACM, Volume 43 Issue 9 
Publisher: ACM Press 
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Tree structures construction using key densities 
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Publisher: ACM Press 
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Storage structure alternatives exist for structuring symbol trees. Sequential structure is 
used in Trie and linked list structure is used in Doubly Chained Tree. A model of hybrid 
tree structures is presented which employs storage structures at levels where they are 
most efficient. The model parameters are determined by the densities of key components. 
A related hit ratio problem is solved so that these densities can be estimated. Analyses 
are given to determine appropriate tree structures ... 

Public protection of software | 
Amir Herzberg, Shlomit S. Pinter 

October 1987 ACM Transactions on Computer Systems (TOCS), Volume 5 Issue 4 
Publisher: ACM Press 
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One of the overwhelming problems that software producers must contend with is the 
unauthorized use and distribution of their products. Copyright laws concerning software 
are rarely enforced, thereby causing major losses to the software companies. Technical 
means of protecting software from illegal duplication are required, but the available means 
are imperfect. We present protocols that enable software protection, without causing 
substantial overhead in distribution and maintenance. The pro ... 

Surfing the Net for software engineering notes | 
Mark Doernhoefer 

July 2000 ACM SIGSOFT Software Engineering Notes, Volume 25 Issue 4 
Publisher: ACM Press 
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June 1983 Proceedings of the 20th conference on Design automation DAC '83 

Publisher: IEEE Press 
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Computer-aided engineering software is generated in abundance in educational 
institutions. As a major source of design automation software, universities have a lot to 
offer: a progressive research environment; a seemingly inexhaustible supply of software 
engineers in the form of undergraduates, graduate engineers, and professors; and a no- 
risk, multi-disciplinary design lab for experimentation. For these reasons, university 
software is being widely sought for use in production/commercial en ... 

11 Software publishing and the software develo per 
Philip Evans 
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Secure personal computing in an insecure network 
Dorothy E. Denning 

August 1979 Communications of the ACM, Volume 22 issue 8 
Publisher: ACM Press 

Full text available: ^■Q Pdff 654.64 KB) Additional Information: full citation , abstract , references , citings 

A method for implementing secure personal computing in a network with one or more 
central facilities is proposed. The method employs a public-key encryption device and 
hardware keys. Each user is responsible for his own security and need not rely on the 
security of the central facility or the communication links. A user can safely store 
confidential files in the central facility or transmit confidential data to other users on the 
network. 

Keywords: networks, personal computing, privacy, public-key encryption, security 



A KeyServer for facult y, not j ust labs 
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Academic lab managers have been using Sassafras's KeyServer software for more than a 
decade to manage software licenses. KeyServer is server-based license management 
software that allows lab managers to install dozens of licensed software packages on most 
or all of their lab computers, even if they own just a few licenses for each software 
package. This paper describes the use of KeyServer in a non-lab environment. The School 
of Architecture and Allied Arts at the University of Oregon installed a ... 

Keywords: KeyServer, faculty, sassafras, software licensing 
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Crystal R. Milter, Henry R. Bent 

October 2004 Proceedings of the 32nd annual ACM SIGUCCS conference on User 
services SIGUCCS '04 

Publisher: ACM Press 
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Updating Oberlin College's eight Macintosh computer labs from the conventional OS 9 of 
our youth to Apple's newest, sexy, Unix-based OS X has been the embodiment of our 
institution's historic motto, "Learning and Labor". New challenges, incompatibilities, and 
excitement have greeted our IT staff most every step of the way. Gone are the days of 
brightly colored computers, RevRdist, Pcounter, and happy Macs. Today our labs are filled 
with sleek flat-panel iMacs and Pharos Release Stations while ... 
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We present a domain-independent model of hierarchical software system design and 
construction that is based on interchangeable software components and large-scale reuse. 
The model unifies the conceptualizations of two independent projects, Genesis and Avoca, 
that are successful examples of software component/building-block technologies and 
domain modeling. Building-block technologies exploit large-scale reuse, rely on open 
architecture software, and elevate the granularity of programming to ... 

Keywords: domain modeling, open system architectures, reuse, software building-blocks, 
software design 
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For a variety of reasons, in recent years doing more with less has become standard 
operating practice within IT departments of higher education. Colleges and Universities, 
following the industry trend to decentralize aspects of enterprise management to smaller 
functional areas within the organization, are moving less centralized enterprise 
management functions to individual departments. The use of Microsoft's Active Directory 
structure with Organizational Units (OU) and the other object conce ... 

Keywords: "The Six Thinking Hats", "universal troubleshooting process", MacGvver 
principle, MacGyver toolkit, OS compatibility, automation and enterprise management, 
deep freeze, ghost console, group policy object (GPO), innovation, interactive 
development environment (IDE), methodology, microsoft management console (MMC), 
migration, open access computing, open access labs, organizational unit (OU), roaming 
user profiles (RUPS), system lockdown procedures, troubleshooting 
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This little book (109 pages) is excellent for the company considering the small computer 
and its software. The material is requirements -based and walks through an example of 
acquisition. The Appendices are the key to the book and provide checklists for 
hardware/software purchases. The content is based on determining requirements for the 
organization then going through a step-by-step process in solving those needs. 
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Recently, there has been considerable interest in providing "trusted computing platforms" 
using hardware^— ~TCPA and Palladium being the most publicly visible examples. In this 
paper we discuss our experience with building such a platform using a traditional time- 
sharing operating system executing on XOM~— ~a processor architecture that provides 
copy protection and tarn per- resistance functions. In XOM, only the processor is trusted; 
main memory and the operating system are not trusted. Our opera ... 
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